feat(update): 主机每日记录组件版本比对，面板更新页展示可用更新与应用命令

deploy/bootstrap.sh

@@ -346,6 +346,8 @@ DB_BACKUP_SERVICE="/etc/systemd/system/felis-db-backup.service"
 DB_BACKUP_TIMER="/etc/systemd/system/felis-db-backup.timer"
 WATCHDOG_SERVICE="/etc/systemd/system/felis-watchdog.service"
 WATCHDOG_TIMER="/etc/systemd/system/felis-watchdog.timer"
+UPDATE_CHECK_SERVICE="/etc/systemd/system/felis-update-check.service"
+UPDATE_CHECK_TIMER="/etc/systemd/system/felis-update-check.timer"
 WATCHDOG_STATE="/var/lib/felis/watchdog/state.json"
 OFFSITE_ENV="${STATE_DIR}/offsite.env"
 OFFSITE_SERVICE="/etc/systemd/system/felis-offsite.service"
@@ -3262,6 +3264,46 @@ summary_offsite() {
 # memory, and mails the owners (their verified addresses, over the [smtp] relay) what
 # has stayed wrong long enough to matter. It runs on the host so a k3s that is down is
 # still reported. The first run happens now, so a broken unit shows up in this install.
+# The daily version check. Felis applies no update on its own; `felis update --record`
+# compares what this host runs with the newest upstream releases and stores the result,
+# which the panel's Updates page shows with the command that applies each update. It runs
+# on the host because that is where the installed versions are readable. The first check
+# runs in the background: it waits on the release feeds, and nothing in the install
+# depends on it.
+install_update_check_timer() {
+  cat > "$UPDATE_CHECK_SERVICE" <<EOF
+[Unit]
+Description=Felis component version check (felis update --record)
+After=network-online.target postgresql.service k3s.service
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=${HOST_BIN} update --record -config ${STATE_DIR}/felis.host.toml
+TimeoutStartSec=5min
+Nice=10
+PrivateTmp=yes
+NoNewPrivileges=yes
+ProtectSystem=full
+EOF
+  cat > "$UPDATE_CHECK_TIMER" <<EOF
+[Unit]
+Description=Daily Felis component version check
+
+[Timer]
+OnCalendar=*-*-* 05:30:00
+RandomizedDelaySec=30min
+Persistent=true
+
+[Install]
+WantedBy=timers.target
+EOF
+  systemctl daemon-reload
+  systemctl enable --now felis-update-check.timer
+  systemctl start --no-block felis-update-check.service
+  ok "version check: daily; the panel's Updates page shows what has a newer release (journalctl -u felis-update-check)"
+}
+
 install_watchdog_timer() {
   local disks="/,/var/lib/rancher/k3s,/var/lib/postgresql,/var/lib/felis" path
   for path in "$FELIS_WORLDS_HOST_PATH" "$FELIS_ARCHIVE_LOCAL_PATH" "$FELIS_DB_BACKUP_DIR"; do
@@ -4216,6 +4258,8 @@ main() {
   install_db_backup_timer
   # After the backup timer: its first bundle is part of the first copy.
   install_offsite_timer
+  # After install_velocity: the check reads the installed proxy jar's version.
+  install_update_check_timer
   # Last: its first run should see the platform as this install leaves it.
   install_watchdog_timer
   mark_bootstrap_done

deploy/bootstrap_test.sh

@@ -1530,6 +1530,34 @@ expect "a failed first backup shows its log" "JOURNAL: pg_dump: connection refus
 expect "a failed first backup is a loud warning" "WARN: the first database backup failed" "$out"
 rm -rf "$tdir"
 
+ublock="$(awk '/^install_update_check_timer\(\) \{/,/^}/' "$BS")"
+[ -n "$ublock" ] || { echo "FAIL: no install_update_check_timer found in $BS"; exit 1; }
+[ "$(printf '%s\n' "$ublock" | wc -l)" -lt 60 ] \
+  || { echo "FAIL: the extracted block is not install_update_check_timer -- did its closing brace move?"; exit 1; }
+udir="$(mktemp -d)"
+out="$(UPDATE_CHECK_SERVICE="$udir/felis-update-check.service" UPDATE_CHECK_TIMER="$udir/felis-update-check.timer" \
+  HOST_BIN=/usr/local/bin/felis STATE_DIR=/etc/felis bash -c '
+  ok() { printf "OK: %s\n" "$*"; }; warn() { printf "WARN: %s\n" "$*"; }
+  systemctl() { printf "SYSTEMCTL: %s\n" "$*"; }
+  '"$ublock"'
+  install_update_check_timer' 2>&1)"
+unit="$(cat "$udir/felis-update-check.service")"
+timer="$(cat "$udir/felis-update-check.timer")"
+expect "the version check records its result for the panel" \
+  "ExecStart=/usr/local/bin/felis update --record -config /etc/felis/felis.host.toml" "$unit"
+expect "the version check is a oneshot" "Type=oneshot" "$unit"
+expect "the version check runs daily" "OnCalendar=*-*-* 05:30:00" "$timer"
+expect "a missed check catches up at boot" "Persistent=true" "$timer"
+expect "the version check timer is enabled" "SYSTEMCTL: enable --now felis-update-check.timer" "$out"
+expect "the first check runs without holding up the install" "SYSTEMCTL: start --no-block felis-update-check.service" "$out"
+expect "the install says where the result shows" "OK: version check: daily; the panel's Updates page" "$out"
+rm -rf "$udir"
+order="$(awk '/^main\(\) \{/,/^}/' "$BS" | grep -nE '^[[:space:]]*(install_velocity|install_update_check_timer)$' | tr '\n' ' ')"
+case "$order" in
+  *install_velocity*install_update_check_timer*) echo "PASS the version check is installed after the proxy it reads" ;;
+  *) echo "FAIL the version check must be installed after install_velocity: $order"; fails=$((fails + 1)) ;;
+esac
+
 wblock="$(awk '/^install_watchdog_timer\(\) \{/,/^}/' "$BS")"
 [ -n "$wblock" ] || { echo "FAIL: no install_watchdog_timer found in $BS"; exit 1; }
 [ "$(printf '%s\n' "$wblock" | wc -l)" -lt 60 ] \

deploy/e2e_check.sh

@@ -46,7 +46,7 @@ for unit in k3s postgresql felis-velocity; do
 done
 # A release may predate a timer; what this commit installs has them all.
 if [ "$phase" != release ]; then
-  for timer in felis-db-backup.timer felis-watchdog.timer; do
+  for timer in felis-db-backup.timer felis-watchdog.timer felis-update-check.timer; do
     check "${timer} is scheduled" systemctl is-enabled --quiet "$timer"
   done
 fi

deploy/uninstall.sh

@@ -50,8 +50,8 @@ FELIS_CRD="minecraftservers.felis.lolicon.best"
 # Every unit the installer and `felis setup` write. Timers first, so none fires into a
 # service that is already gone.
 FELIS_UNITS=(
-  felis-db-backup.timer felis-watchdog.timer felis-offsite.timer felis-build-tools.timer
-  felis-db-backup.service felis-watchdog.service felis-offsite.service felis-build-tools.service
+  felis-db-backup.timer felis-watchdog.timer felis-offsite.timer felis-build-tools.timer felis-update-check.timer
+  felis-db-backup.service felis-watchdog.service felis-offsite.service felis-build-tools.service felis-update-check.service
   felis-velocity.service felis-nano.service cloudflared-felis.service
   felis-postgres-firewall.service
 )

deploy/uninstall_test.sh

@@ -206,6 +206,13 @@ expect "a purge wants the word purge" "not confirmed" "$out"
 out="$(CONFIRM_TTY="$root/no-tty/x" FELIS_UNINSTALL_SOURCED=1 bash -c '. "$0"; confirm; echo WENT ON' "$US" 2>&1)"
 expect "with no terminal it asks for --yes" "no terminal to confirm on; re-run with --yes" "$out"
 
+# Every unit the installer writes is one the uninstaller removes: a timer left behind
+# keeps firing a felis binary that is gone.
+units="$(awk '/^FELIS_UNITS=\(/ { f = 1; next } f && /^\)/ { f = 0 } f' "$US")"
+for u in $(sed -n 's|^[A-Z_]*="/etc/systemd/system/\([^"]*\)"$|\1|p' "$(dirname "$US")/bootstrap.sh"); do
+  expect "the uninstaller removes $u" " $u" " $(printf '%s' "$units" | tr '\n' ' ')"
+done
+
 if [ "$fails" -eq 0 ]; then
   echo "ALL PASS"
 else